Security Scan Report: hcgxt.com

Submitted: Sep 26, 2026, 2:53:19 PMCompleted: Sep 26, 2026, 2:53:52 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Fake Government of India Income Tax Department penalty notice hosted on hcgxt.com, using legal threats, a 72-hour deadline and a document-download lure to push victims to a malicious link. Do not download or respond.

Risk Factors (4)
Impersonation of a government tax authority on a non-official domain (hcgxt.com, not incometax.gov.in)
Fabricated penalty notice with legal threats and a short compliance deadline
Download link used as the call-to-action instead of any official portal
Domain unranked in Cisco Umbrella despite 9-year age (aged domain likely repurposed, not the official government site)
Domain age information unavailable

Details

Page Title

कर दंड सूचना - भारत सरकार

Scan Type

public

Domain Name Analysis

The domain 'hcgxt.com' uses the commercial generic top-level domain (.com) without a subdomain. Its registrable label 'hcgxt' stretches across 5 characters containing 0 vowels alongside 5 consonants. Breaking it apart gives three words: hc, gx, t. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hcgxt.com

Page Load Overview

1.40s
Total Load Time
145 KB
Total Size

Language Analysis

Primary Language

🇮🇳Hindi
Code: hi
Confidence:80%
Script:Devanagari
Direction:ltr

Detection Details

HTML Lang Attribute:hi
Text Length:1,416 chars
Detector Agreement:50%

Website Classification

Primary Category

government public service100% confidence
Type: static
Method: ml+structural

All Detected Categories

government public service
100%
social media network
99%
download file sharing
99%
adult content
99%
blog personal website
99%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
843.128.27.21Hong Kong, Hong Kong
AS132203Tencent Building, Kejizhongyi Avenue
81--

Detected Technologies1

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A9F1741DEBF371315857B4A8776A9B36A1606133E60BC9553D9CA3D8CFC0CB049A324E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:fgnDU+Fk6L8GgagTU/Gj/A28yBRPJihcmMyYriAenGYlpQivDyxJsO1S:CFf/J6GhU2nGYppWxJsO1S

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:8096:BAEkMSKAUVtWAcBxsPgwBgOJVKYSRiwcEEmIFOwRgJYgoUARxApAZAXUMAJ1AQEegyMIVIxXFIgHyEbEArK2JAIA42mIYQwM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7c7c3e7c7ff
Perceptual Hash:f7cc8c338c33c698
Difference Hash:060e0e0e160e0e26
Wavelet Hash:f2e6c2c2c2c2c3f3
Color Hash:#e0986c

Other Hashes

Crop Resistant:060e0e0e160e0e26

Scan History

Scan history not available

Unable to load historical scan data